Bug 968973

Summary:	[RESTAPI] Cookies are being set even when not using persistent authentication
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Idith Tal-Kohen <italkohe>
Component:	ovirt-engine-restapi	Assignee:	Ravi Nori <rnori>
Status:	CLOSED ERRATA	QA Contact:	Barak Dagan <bdagan>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	3.2.0	CC:	acathrow, bazulay, bdagan, cpelland, hateya, ibegun, iheim, jbiddle, jkt, mpastern, oramraz, pstehlik, Rhev-m-bugs, sgrinber
Target Milestone:	---	Keywords:	ZStream
Target Release:	3.2.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Previously, cookies were being set in the REST-API regardless of using "Prefer: persistent-auth" when sending a request. Now, cookies are only set when "Prefer: persistent-auth" is not specified.	Story Points:	---
Clone Of:	962730	Environment:
Last Closed:	2013-07-16 13:38:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	962730
Bug Blocks:

Comment 2 Barak Dagan 2013-07-02 09:05:38 UTC

Verified on SF18.2

>curl -X GET -H "Accept: application/xml" -u USER:PASS https://RHEVM:443/api -k --header "Prefer: ''" -c cookie.txt
>ls cookie.txt
ls: cannot access cookie.txt: No such file or directory


>curl -X GET -H "Accept: application/xml" -u USER:PASS https://RHEVM:443/api -k -c cookie.txt
>ls cookie.txt
ls: cannot access cookie.txt: No such file or directory


>curl -X GET -H "Accept: application/xml" -u USER:PASS https://RHEVM:443/api -k --header "Prefer: persistent-auth" -c cookie.txt
>ls cookie.txt
cookie.txt

Comment 4 errata-xmlrpc 2013-07-16 13:38:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1048.html